Security Boulevard

Small and mid-sized contractors play a vital role in the U.S. defense industrial base — but too often, they remain the weakest link in the cybersecurity chain.

Related: Pentagon enforcing CMMC

RADICL’s  2025 DIB Cybersecurity Maturity Report reveals that 85% … (more…)

The post Shared Intel Q&A: Viewing CMMC as a blueprint for readiness across the defense supply chain first appeared on The Last Watchdog.

The post Shared Intel Q&A: Viewing CMMC as a blueprint for readiness across the defense supply chain appeared first on Security Boulevard.

Unless you have been living under a rock in the past few days, you would have seen that cybersecurity headlines have been overshadowed by reports that hackers fooled artificial intelligence agents into automating break-ins into major corporations. Anthropic, the makers of the artificial intelligence (AI) chatbot Claude, claim to run an investigation into how an AI-orchestrated […]

The post A Polycrisis of AI Cyberattacks is Approaching. Are You Breach Ready Yet? appeared first on ColorTokens.

The post A Polycrisis of AI Cyberattacks is Approaching. Are You Breach Ready Yet? appeared first on Security Boulevard.

Tonic Textual’s new Custom Entity Types let teams define, train, and deploy entity models on their own data—no data science skills needed.

The post Your data, your model: Self-serve custom entity types in Tonic Textual appeared first on Security Boulevard.

SESSION
Session 3B: Wireless, Cellular & Satellite Security

-----------

-----------

Authors, Creators & Presenters: Yangtao Deng (Tsinghua University), Qian Wu (Tsinghua University), Zeqi Lai (Tsinghua University), Chenwei Gu (Tsinghua University), Hewu Li (Tsinghua University), Yuanjie Li (Tsinghua University), Jun Liu (Tsinghua University)

-----------

PAPER

-----------

Time-varying Bottleneck Links in LEO Satellite Networks: Identification, Exploits, and Countermeasures
In this paper, we perform a multifaceted study on the security risk involved by the unique time-varying bottleneck links in emerging Low-Earth Orbit (LEO) satellite networks (LSNs). We carry out our study in three steps. First, we profile the spatial and temporal characteristics of bottleneck links and how they might be exploited for bottleneck identification. Thus, the bottleneck links imposes a new risk of link flooding attack (LFA) on LSNs. Second, we propose SKYFALL, a new LFA risk analyzer that enables satellite network operators to simulate various LFA behaviors and comprehensively analyze the consequences on LSN services. Concretely, SKYFALL's analysis based on real-world information of operational LSNs demonstrates that the throughput of legal background traffic could be reduced by a factor of 3.4 if an attacker can manipulate a number of compromised user terminals to continuously congest the bottleneck links. Based on our analysis, we finally discuss the limitations of traditional LFA countermeasures and propose new mitigation strategies for LSNs.

-----------

ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.

-----------

Our thanks to the **[Network and Distributed System Security (NDSS) Symposium][1]** for publishing their Creators, Authors and Presenter’s superb **[NDSS Symposium 2025 Conference][2]** content on the **[organization’s’][1]** **[YouTube][3]** channel.

Permalink

The post NDSS 2025 – Time-Varying Bottleneck Links In LEO Satellite Networks appeared first on Security Boulevard.

🎁 Get Ready for Holidaze 2025 — The Ultimate Year-End Giveaway for MSPs! 🎉

The holidays are almost here, and that means one thing: Holidaze 2025 is back and bigger than ever! Channel Program and its sponsors are turning up the cheer with two 🎲 live prize drawings every business day and 💰 thousands in prizes for MSPs and IT pros.

The post Calling All MSPs – Are you Ready for Holidaze? appeared first on Security Boulevard.

AI has changed how software gets built. For years, engineering teams treated code as the scarce resource. Writing it took time. Editing it took effort....Read More

The post Why Context Matters More Than Code in AI-Native Product Development appeared first on ISHIR | Custom Software Development Dallas Texas.

The post Why Context Matters More Than Code in AI-Native Product Development appeared first on Security Boulevard.

What is Cybersecurity Findings Management?

Cybersecurity findings management is the process of identifying, prioritizing, tracking, and remediating security issues uncovered through vulnerability scans, audits, or assessments.

The post Cybersecurity Findings Management: What You Need to Know appeared first on Security Boulevard.

Explore self-sovereign identity (SSI) in authentication systems, its benefits, technical components, and practical applications for enterprise SSO and CIAM solutions.

The post Defining Self-Sovereign Identity in Authentication Systems appeared first on Security Boulevard.

Explore different authentication provider types (social, passwordless, MFA) and learn best practices for choosing the right one to enhance security and user experience in your applications.

The post Authentication Provider Types: A Guide to Best Practices appeared first on Security Boulevard.

What do the Secure-by-Design and "Secure-by-Default" badges really mean?

The post “Secure-by-Design” and “Secure-by-Default” Badges from SecureIQLab — and Why They Matter in WAAP appeared first on SecureIQ Lab.

The post “Secure-by-Design” and “Secure-by-Default” Badges from SecureIQLab — and Why They Matter in WAAP appeared first on Security Boulevard.

The post Inside the Ingram Micro Ransomware Attack: Lessons in Zero Trust appeared first on Votiro.

The post Inside the Ingram Micro Ransomware Attack: Lessons in Zero Trust appeared first on Security Boulevard.

How Do Non-Human Identities Transform Cybersecurity Management? Where organizations increasingly pivot towards digital infrastructure, the management of Non-Human Identities (NHI) becomes paramount. These machine identities, comprising encrypted secrets like passwords, tokens, or keys, lay the foundation for secure cloud environments. But how are they reshaping cybersecurity management across various industries? The Growing Significance of NHI […]

The post Enhanced Support Systems for Effective NHI Management appeared first on Entro.

The post Enhanced Support Systems for Effective NHI Management appeared first on Security Boulevard.

How Do We Keep Non-Human Identities Safe from Unauthorized Access? Understanding Non-Human Identities (NHIs) is crucial. With the rise of cloud computing, the management of machine identities has become a central element of a robust security strategy. But how can organizations ensure these NHIs are protected from unauthorized access while maintaining operational efficiency? Reducing Security […]

The post Keeping NHIs Safe from Unauthorized Access appeared first on Entro.

The post Keeping NHIs Safe from Unauthorized Access appeared first on Security Boulevard.

The Crucial Role of Non-Human Identity Security in Today’s Cloud Environments Why are organizations increasingly focusing on the security of Non-Human Identities (NHIs) within their cybersecurity strategies? Where industries like financial services, healthcare, and travel become deeply integrated with digital technologies, managing NHIs is critical for safeguarding sensitive data and assets. This discussion highlights how […]

The post Stay Reassured with Consistent NHI Security Updates appeared first on Entro.

The post Stay Reassured with Consistent NHI Security Updates appeared first on Security Boulevard.

AI agents are reshaping online retail. Discover why bot management is essential infrastructure to control agentic commerce and drive growth.

The post From Bots to Buyers: With Agentic AI, Bot Management Becomes Core Infrastructure appeared first on Security Boulevard.

AttackIQ has released a new attack graph that emulates the behaviors exhibited by SideWinder, a threat actor with a long history of cyber espionage dating back to 2012. The group has primarily targeted government, military, and maritime sectors across South Asia and nearby regions through sophisticated spear-phishing campaigns, exploitation of Microsoft Office vulnerabilities, and the deployment of StealerBot, a memory-resident backdoor.

The post Emulating the Espionage-Oriented Group SideWinder appeared first on AttackIQ.

The post Emulating the Espionage-Oriented Group SideWinder appeared first on Security Boulevard.

“72% of organizations use AI in business functions — but only 13% feel ready to secure it.” That gap, between adoption and preparedness, explains why traditional AppSec approaches aren’t enough.  Modern AI systems aren’t just software systems that run code; they’re probabilistic, contextual, and capable of emergent behavior. In a traditional app, a query to […]

The post Why AI Red Teaming is different from traditional security appeared first on Security Boulevard.

SESSION
Session 2D: Android Security 1

Authors, Creators & Presenters: Mathias Oberhuber (Graz University of Technology), Martin Unterguggenberger (Graz University of Technology), Lukas Maar (Graz University of Technology), Andreas Kogler (Graz University of Technology), Stefan Mangard (Graz University of Technology)

PAPER
Power-Related Side-Channel Attacks using the Android Sensor Framework

Software-based power side-channel attacks are a significant security threat to modern computer systems, enabling adversaries to extract confidential information. Existing attacks typically exploit direct power signals from dedicated interfaces, as demonstrated in the PLATYPUS attack, or power-dependent timing variations, as in the case of the Hertzbleed attack. As access to direct power signals is meanwhile restricted on more and more platforms, an important question is whether other exploitable power-related signals exist beyond timing proxies. In this paper, we show that Android mobile devices expose numerous power-related signals that allow power side-channel attacks. We systematically analyze unprivileged sensors provided by the Android sensor framework on multiple devices and show that these sensors expose parasitic influences of the power consumption. Our results include new insights into Android sensor leakage, particularly a novel leakage primitive: the rotation dependent power leakage of the geomagnetic rotation vector sensor. We extensively evaluate the exposed sensors for different information leakage types. We compare them with the corresponding ground truth, achieving correlations greater than 0.9 for some of our tested sensors. In extreme cases, we observe not only statistical results but also, e.g., changes in a compass app's needle by approximately 30° due to CPU stress. Additionally, we evaluate the capabilities of our identified leakage primitives in two case studies: As a remote attacker via the Google Chrome web browser and as a local attacker running inside an installed app. In particular, we present an end-to-end pixel-stealing attack on different Android devices that effectively circumvents the browser's cross-origin isolation with a leakage rate of 5 - 10 s per pixel. Lastly, we demonstrate a proof-of-concept AES attack, leaking individual key bytes using our newly discovered leakage primitive.

ABOUT NDSS The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the organization’s’ YouTube channel.

Permalink

The post NDSS 2025 – Power-Related Side-Channel Attacks Using The Android Sensor Framework appeared first on Security Boulevard.

Security leaders are under increasing pressure to prove that their defenses actually work. Board members and stakeholders want to see measurable progress, yet most metrics available to CISOs today don’t quite fit that need. 

The post Metrics Every CISO Needs for Threat-Led Defense Success appeared first on Security Boulevard.

As organizations rush to deploy AI, enterprise defenses are struggling to keep up. This blog explores the emerging AI exposure gap — the widening divide between innovation and protection — and what security leaders can do to close it.

Key takeaways:

1. The AI exposure gap is widening as most organizations adopt AI faster than they can secure it, creating a gap between innovation and security.
    
2. Many organizations are aligning with frameworks like the EU AI Act and NIST AI RMF and adopting best practices, but few are translating those efforts into real protection — with only a small share encrypting AI data, testing AI systems, or enforcing identity controls.
    
3. Tenable’s latest Insight Brief, AI Adoption Outpaces Security: The AI Exposure Gap, explains how proactive defense and continuous visibility can help organizations secure AI pipelines and reduce exposure.

AI isn’t just reshaping how organizations innovate, it is rewriting the rules of risk.

As businesses rush to adopt AI tools and integrate them into operations, the pace of innovation has outstripped the pace of protection. The result? A growing AI exposure gap that’s leaving critical systems and data vulnerable.

AI’s rapid integration into everyday business tools like productivity apps, browsers, and cloud services creates invisible pathways for attack. As AI becomes embedded into enterprise ecosystems, these same connection points between systems, models, and data expand the attack surface, exposing new risks beyond the models themselves.

This blog takes a closer look at findings from Tenable’s new Insight Brief, AI Adoption Outpaces Security: The AI Exposure Gap, which builds on The State of Cloud and AI Security 2025 report, developed in collaboration with the Cloud Security Alliance (CSA). While the report mapped the broad landscape of cloud and AI security, this brief dives deeper into one urgent theme: the widening divide between AI innovation and enterprise readiness — and what security leaders can do about it.

Nearly nine in ten organizations (89%) have adopted AI in some form. More than half (55%) of organizations are running AI in production, and another 34% are in pilot phases. Yet, one in three (34%) have already suffered an AI-related breach.

Two of the three top causes of these breaches — exploited vulnerabilities (21%) and insider threats (18%) — are hardly unique to AI, a reminder of the importance of proactive exposure management and cybersecurity best practices.

Top Causes of AI Workload Breaches: Exploited Vulnerabilities and Security Flaws

Source: State of Cloud and AI Security 2025, commissioned by Tenable and developed in collaboration with the Cloud Security Alliance.

 

Each new AI model, dataset, and integration expands the attack surface, particularly across hybrid and multi-cloud environments where visibility is fragmented and risk assessments lag behind adoption. 

The lesson: AI exposure is now a measurable enterprise risk — amplified by weak identity controls and limited visibility across hybrid and multi-cloud environments.

Compliance ≠ security

Organizations are making meaningful progress by aligning with frameworks like the EU AI Act and NIST AI RMF. While 51% follow these frameworks, only 22% encrypt AI data and 26% conduct AI-specific security testing, such as red-teaming.

The result: Organizations may check the box on compliance while leaving critical data and AI pipelines vulnerable. Compliance and security often overlap, but they serve different goals.

Source: State of Cloud and AI Security 2025, commissioned by Tenable and developed in collaboration with the Cloud Security Alliance.

Other steps organizations are taking, beyond compliance, include adopting industry best practices, conducting regular audits of AI model integration protections, and implementing AI-specific identity and access controls, all of which play a role in reducing risk.

How to close the AI exposure gap

To bridge the gap between AI innovation and security, organizations should:

• Treat AI as a dynamic attack surface and continuously monitor for anomalous activity.
• Strengthen foundational controls like encryption, access management, and model integrity validation.
• Integrate AI exposures into unified, proactive risk management strategies across cloud and hybrid environments.

Security teams need unified visibility to manage this new layer of risk effectively, moving beyond compliance checklists to real-world resilience.

How Tenable can help

Tenable provides unified exposure management that brings together cloud, identity and AI risk insights into a single view. Tenable AI Exposure, available in the Tenable One Exposure Management Platform, gives you visibility into how your teams use AI platforms and where that usage could put your data, users, and defenses at risk. Together with Tenable AI Aware, which uncovers AI tools across your environment, Tenable now provides one of the first end-to-end solutions to both discover and secure AI platform usage as part of your exposure management program.

Learn more

• Download The State of Cloud and AI Security 2025
• View the Insight Brief: AI Adoption Outpaces Security: The AI Exposure Gap

The post How Rapid AI Adoption Is Creating an Exposure Gap appeared first on Security Boulevard.